Call of Duty takes PC game offline after multiple reports of RCE attacks on players

Activision's Call of Duty: World War 2 PC version was taken offline after widespread reports of Remote Code Execution (RCE) attacks during multiplayer matches, allowing malicious actors to compromise player systems. This vulnerability, attributed to the game's transition to peer-to-peer networking as it ages, underscores significant operational and reputational risks for the publisher and platform providers like Xbox GamePass, highlighting the persistent cybersecurity challenges in maintaining legacy online titles within a major franchise.

Analysis

Activision has taken the PC version of its 2017 title, Call of Duty: World War 2, offline following widespread reports of active Remote Code Execution (RCE) attacks that compromised players' computers. The vulnerability is attributed to the game's transition from dedicated servers to a peer-to-peer (P2P) networking model, a common cost-reduction strategy for aging online titles that exposes users to direct threats. This event represents a significant operational and reputational failure for Activision (ticker: ATVI), underscored by a strongly negative sentiment score of -0.8. The incident also creates collateral reputational risk for Microsoft (ticker: MSFT), as the game was recently added to its Xbox GamePass service on June 30, raising questions about the security vetting of legacy titles on subscription platforms. The problem appears systemic, with the article noting that hacking in older Call of Duty titles is a well-known issue and that similar RCE vulnerabilities were flagged six years prior, indicating a persistent and unaddressed security challenge within one of gaming's most valuable franchises.

Key Decisions for Investors

• Investors in Activision (ATVI) should treat this as a material event, monitoring for any disclosures on the costs required to secure its extensive back-catalog, as this highlights a potentially systemic and under-addressed liability.
• For Microsoft (MSFT), this incident is a minor but notable test of its quality control for third-party content on the strategically important GamePass service, and its handling will be indicative of its platform governance.
• The market should watch Activision's official communications closely, as a prolonged or inadequate response could erode player trust and inflict long-term damage on the highly valuable Call of Duty brand equity.